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1. Status of the Claims 

Claims 16-19 are pending in this application. Claims 1-9 and 20 were cancelled. Claims 10- 
15 and 21-24 were withdrawn from consideration. 

Claims 16 and 19 are rejected under 35 U.S.C. § 103(a) as being unpatentable over Desai, et 
al., (U.S. 5,781,703 ^ "Desai") in view of Engel, et al., (U.S. 6,1 15,393 ^ "Engel"). 

Claims 17 and 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over Desai and 
Engel as applied to claim 16, and in further view of Dobbins, et al., (U.S. 5,790,546 - 
"Dobbins"). 

2. The Invention captures and analyses traffic flowing to and from each of a plurality of 
end stations. 

The invention performs distributed remote network monitoring (dRMON) in a local area 
network (LAN) deploying, within each of a plurality of end systems (ESs) to be monitored, 
executable code comprising an dRMON agent associated with the ES configured to 
communicate with a dRMON proxy connected to the LAN, each dRMON agent 
implementing RMON functional groups but only capturing and analyzing packets transmitted 
and/or received by the ES as explicitly recited in claim 1 6. By only capturing and analyzing 
packets transmitted and/or received by each ES, it should be understood that the invention 
monitors traffic performance in the LAN using each of the plurality of ESs as an observation 
point, as opposed to internal performance within the end-system. 

3. "How busy is the CPU?" - Desai analyses processor performance. 

Desai describes intelligent agents that monitor the internal performance of the devices in 
which they reside, such as CPU performance, see, e.g., col. 1, lines 29-31: 

In conventional computer performance monitoring 
applications, the monitoring application generates a request 
for data, such as "How busy is the CPU?'. This request is 

See also, col. 2, lines 6-9: 
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a Data Server, and a Proxy ControUer. The Intelligent 
Remote Agents receive commands instructing them to col- 
lect performance data on the Agent's as.soclated conifRiter 
system, wherein the commands comprise predicates for 



Further, Desai collects processor data only in response to specific SITMON requests to 
monitor a situation within a device hosting an intelligent agent, see col. 10, lines 31-42, 
below: 

Thereafter, an operator on the operatcMr monitoring work- 
station 20 issues a situation monitoring request to determine 
whether any processes running on Server #1 or Server #2 are 
using an inordinate amount of CPU time. i.e.. greater than 
some threshold value or percentage. The request is trans- 
mitted to the Data Server 14. which in turn forwards it to the 
Proxy ControEer 16. The Rroxy ContiroUer 16 creates one or 
m«-e commands for the request containing a predicate and 
^ sampling interval. The Proxy ControUer 16 then transmits 
the commands to the Intelligent Remote Agents 18 on Server 
#1 and Server #2. 

Therefore, it is clear error to assert Desai teaches the claimed "only capturing and analyzing 
packets transmitted and/or received by the ES" and forwarding "periodically by the dRMON 
agents, agent data including statistics and/or captured packets to said dRMON proxy." It 
should be readily understood that Desai performs device monitoring, while the invention 
monitors, via a plurality of ESs each including a dRMON agent as claimed, traffic across the 
LAN. Therefore, Desai can never be used to make the invention obvious. 



4. Engel describes a probe, not the invention. 



Engel fails to cure the defects of Desai. Engel describes a physical device (probe) configured 

to be inserted in communication lines between other devices to monitor communications 

between the other devices, see Engel, col. 6, lines 52-65, below: 

Network Monitor 10 (referred to hereinafter simply as 
Monitor 10) is the data collection module which is attached 
to the LAJN. It is a high performance real time front end 
5.'! processor which collects packets on the network and per- 
tbrms some degree of analysis to .search for actual or 
potential problems and to maintain statistical information for 
use in later analysis. In general, it performs the following 
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It is clear error to assert a physical processor inserted in communications lines between 
networked devices as in Engel can teach dRMON agents deployed in ESs, as claimed. 
Further, the Examiner's assertion that Engel teaches dRMON agent data is erroneous, see, 
e.g., col. 27 of Engel, which describes a monitor registering with a management workstation, 
which is the operator interface for the monitor, see col. 6, line 66 - col. 7, line 9. There is an 
agent resident in the monitor to communicate with the management workstation, but it should 
be understood that the monitor agent can never be a dRMON agent deployed in ESs, as 
claimed. The Engel agent is deployed in a device having the sole purpose of monitoring i.e., a 
probe. Therefore, the rejection of claim 16 based on the combination of Desai and Engel 
should be reconsidered and withdrawn. The same is true for claim 19, where the dRMON 
agents perform continual response time monitoring and forward monitoring results to the 
dRMON Proxy. There is no suggestion of continual response time monitoring by dRMON 
agent in either reference. 

5. Dobbins can't work in an end system 

Dobbins describes a method for secure fast packet switching in which MAC ID of devices 
sending or receiving packets across the network are recorded by an agents residing in 
switches in the network and associated with ports on the switches. Dobbins uses the 
information recorded by the agents to set up virtual connections or virtual LANS in the 
network in order to ensure varying QoS levels for different sets of devices on the network. 
As shown in Figures 7A and 7B, the agent resides in a switch, which would never be 
confused with an ES by a person of ordinary skill in the art. The agents described by Dobbins 
cannot perform their function if they resided on an ES instead of a switch. The Examiner's 
assertion that Dobbins has anything to do with dRMON proxies or dRMON is pure 
conjecture. There is nothing in Dobbins that has anything to do with RMON as in Engel, or 
the command driven dRMON as in Desai. The same is true for claim 18. 

6. Conclusion 

It is believed that this application is now in condition for allowance. A notice to this effect is 
respectfully requested. Should further questions arise concerning this application, the 
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Examiner is invited to call Applicant's attorney at the number listed below. Please charge any 
shortage in fees due in connection with the filing of this paper to Deposit Account 50-6350 . 



Respectfully submitted 
3Com Corporation. 

^ 

350 Campus Drive Andrew!. Curlin 

Marlborough, MA 01 752 Attorney for the Assignee 

Telephone: (508) 323-1330 Reg. No. 48,485 
Customer No. 56436 
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